Add privileges for Custom Roles which are currently only available in Built-in Roles
Currently the list of privileges assignable for Custom Roles is only a subset of privileges available to Built-in Roles This request is to add the missing privileges to both the REST API and Atlas UI which are available to Built-in Roles
The first set of privileges requested by a customer is from the Cluster Monitor role
Expanded prioritized privileges requested:
checkFreeMonitoringStatus
getCmdLineOpts
getLog
getParameter
getShardMap
hostInfo
inprog
listShards
netstat
replSetGetConfig
replSetGetStatus
setFreeMonitoring
shardingState
Aaron
shared this idea
-
Chandler
commented
I would also add that viewRole cannot be granted, and, to my knowledge, the only way that a user can have that privilege is if they are assigned the atlasAdmin role. This is a desired addition to custom role actions/privileges options
-
This makes sense eventually but is not a high priority over the near to medium term because the clusterMonitoring role can be used. Thanks for filing
